Principal Digital Identity Engineer

The Nuclear Company7 months ago
Washington, DC, United States
Remote
Full-time
Junior Level (1-3 years)

Job Description

The Nuclear Company

The Nuclear Company is the fastest growing startup in the nuclear and energy space creating a never before seen fleet-scale approach to building nuclear reactors. Through its design-once, build-many approach and coalition building across communities, regulators, and financial stakeholders, The Nuclear Company is committed to delivering safe and reliable electricity at the lowest cost, while catalyzing the nuclear industry toward rapid development in America and globally.

Principal Digital Identity Engineer

Position Overview

The Principal Digital Identity Engineer is a senior technical leadership role responsible for designing, implementing, and maintaining enterprise-level digital identity and access management systems. This position requires deep expertise in identity governance, authentication protocols, and security frameworks to ensure secure and seamless access to digital resources across the organization.

Responsibilities

Technical Leadership & Architecture

  • Design and architect enterprise-wide digital identity management solutions including identity governance, access management, and authentication systems
  • Lead implementation of IAM platforms, single sign-on (SSO), multi-factor authentication (MFA), and privileged access management (PAM) solutions
  • Develop and maintain identity lifecycle management processes from provisioning to de-provisioning
  • Establish standards for identity federation, directory services, and authentication protocols (SAML, OAuth, OpenID Connect, LDAP)

Security & Compliance

  • Ensure compliance with regulatory requirements and industry standards for identity management and data protection
  • Implement security best practices for identity verification, authentication, and authorization
  • Conduct security assessments and risk analysis for identity systems
  • Develop policies and procedures for identity governance and administration

Innovation & Continuous Improvement

  • Drive adoption of modern identity management technologies including decentralized identity, biometrics, and zero-trust architectures
  • Automate identity processes to improve efficiency and reduce manual overhead
  • Evaluate and recommend new identity technologies and vendor solutions

Experience

  • Bachelor's: in Computer Science, Information Security, Engineering, or related field (Master's preferred)
  • 12+ years: experience in identity and access management, information security, or related fields
  • 5+ years: in senior/lead engineering role with technical leadership
  • Expert knowledge: of IAM platforms (Okta, Azure AD, Ping Identity, ForgeRock, SailPoint)
  • Deep understanding: of authentication protocols (SAML, OAuth 2.0, OpenID Connect, LDAP, Kerberos)
  • Proficiency: in directory services (Active Directory, Azure AD, LDAP)
  • Experience: with privileged access management (PAM) and identity governance solutions
  • Strong understanding: of cryptography, PKI, and certificate management
  • Knowledge: of cloud identity services (AWS IAM, Azure AD, GCP Identity)
  • Experience: with scripting and automation (Python, PowerShell, or similar)
  • Understanding: of security frameworks (NIST, ISO 27001, CIS Controls)
  • Knowledge: of compliance requirements (GDPR, HIPAA, SOC 2)
  • Experience: with zero-trust security models

Preferred Experience

  • CISSP, CISM, CISA: or vendor-specific IAM certifications
  • Experience: in highly regulated industries (nuclear, healthcare, finance, government)
  • Knowledge: of emerging identity technologies (decentralized identity, blockchain-based identity, biometrics)
  • Experience: with DevSecOps practices and CI/CD pipelines
  • Contributions: to open-source identity projects or industry standards

This role

is critical to ensuring secure, efficient, and compliant access to digital resources across the organization while maintaining the highest standards of security and user experience.

Benefits

  • Competitive compensation packages
  • 401k with company match
  • Medical, dental, vision plans
  • Generous vacation policy, plus holidays

Estimated Starting Salary Range

The estimated starting salary range for this role is $198,000 - $228,000 annually less applicable withholdings and deductions, paid on a bi-weekly basis. The actual salary offered may vary based on relevant factors as determined in the Company's discretion, which may include experience, qualifications, tenure, skill set, availability of qualified candidates, geographic location, certifications held, and other criteria deemed pertinent to the particular role.

EEO Statement

The Nuclear Company is an equal opportunity employer committed to fostering an environment of inclusion in the workplace. We provide equal employment opportunities to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic. We prohibit discrimination in all aspects of employment, including hiring, promotion, demotion, transfer, compensation, and termination.

Export Control

Certain positions at The Nuclear Company may involve access to information and technology subject to export controls under U.S. law. Compliance with these export controls may result in The Nuclear Company limiting its consideration of certain applicants.

Recruiting Fraud Alert

Your safety is our priority. We want to ensure your job search stays secure. Please note that the team at The Nuclear Company only communicates through official @thenuclearcompany.com email addresses. We will never ask for payments or sensitive financial information at any stage of our recruitment process. For your peace of mind, please verify all openings and submit your applications directly through our official careers page: Careers

Required Skills

Access Management
Privileged Access Management (PAM)
Cloud Identity Services (AWS IAM, Azure AD, GCP Identity)
Security Frameworks (NIST, ISO 27001, CIS Controls)
Identity Governance
Security Assessment & Risk Analysis
Identity Lifecycle Management
Scripting/Automation (Python, PowerShell)
Zero-Trust Security Models
IAM Platforms (Okta, Azure AD, Ping Identity, ForgeRock, SailPoint)
Regulatory Compliance (GDPR, HIPAA, SOC 2)
Authentication Protocols (SAML, OAuth 2.0, OpenID Connect, LDAP)